userdei

The problem is gone. Thank you. 1. Sync turned off 2. Date on all devices cleaned. 3. Chrome reinstalled. ... I couldn't solve those minor problems that you've mentioned before - with drivers for wi-fi and audio device - there are no new versions for those devices. I also couldn't find the runonce key in registry, but I don't think that's important.

No, it's a private PC, not used for any business purposes. I don't recognize this I.P. My public I.P. is My Public IPv4 is: 155.xx.xx.33. I'm pretty sure it doesn't matter, even though the Farbar scan was conducted in the safe mode with network connection, Windows wasn't connected the the Web. who.is I.P. report: NetRange: 172.16.0.0 - 172.31.255.255 CIDR: 172.16.0.0/12 NetName: PRIVATE-ADDRESS-BBLK-RFC1918-IANA-RESERVED NetHandle: NET-172-16-0-0-1 Parent: NET172 (NET-172-0-0-0-0) NetType: IANA Special Use OriginAS: Organization: Internet Assigned Numbers Authority (IANA) RegDate: 1994-03-15 Updated: 2013-08-30 Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address. Comment: Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers Comment: Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at: Comment: http://datatracker.ietf.org/doc/rfc1918 Ref: https://rdap.arin.net/registry/ip/172.16.0.0

Thank you for the answer. I run Farbar Recovery in a safe mode, because in the normal mode it stopped responding. I've found and e-mail (Adnan Eren <adnaneren86 [at] hotmail.com>) of person responsible for mikeprg.com domain, wrote question how to stop it, that was the answer: "We apologize for the inconvenience. Just removing the plugin prevents the tab from opening.". I don't know which plugin, since all chrome extensions I have in Chrome are legit. I ask Adnan about it, waiting again or his answer. I reinstalled Chrome after turning off the synchronization. It helped, but I suppose that after synchronizing it again the problem may come back. After applying your tips I'll get back here. Thanks for your help again!

All the reports attached [ scanners haven't found anything suspicious nor containing mikeprg ] Addition.txt FRST.txt SearchReg.txt MalwareBytes report.txt

ABWcleaner didn't find anything. Farbar Recovery stops responding during the scanning. Any other ideas? Maybe www.mikeprg.com should be add to to the Malwarebytes' base as a unwanted site, so it could block websites/apps/extensions related to it.

Hi! The unwanted site mikeprg.com opens itself on a new tab with Chrome. I checked the registry. There are no keys containing mikeprg / mikeprg.com I turned off all application on Windows start. I have no suspicious chrome extensions. I reinstalled Chrome, deleted all history. There are no additional parameters in chrome shortcut. CCleander and ABWcleaner didn't find anything related. I added the rule drivers/etc/hosts so the site doesn't load up, but the tab still appears anyway. What else can I do? Please help!